Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create tech stack docs (techstack.yml and techstack.md) #49

Open
wants to merge 2 commits into
base: git-backend
Choose a base branch
from
Open

Create tech stack docs (techstack.yml and techstack.md) #49

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
dc61994
Update techstack.yml
stacksharebot Feb 29, 2024
f18ac23
Update techstack.md
stacksharebot Feb 29, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions techstack.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ Full tech stack [here](/techstack.md)
# Tech Stack File
![](https://img.stackshare.io/repo.svg "repo") [kclhi/phenoflow](https://github.com/kclhi/phenoflow)![](https://img.stackshare.io/public_badge.svg "public")
<br/><br/>
|89<br/>Tools used|02/11/24 <br/>Report generated|
|89<br/>Tools used|02/29/24 <br/>Report generated|
|------|------|
</div>

Expand Down Expand Up @@ -314,7 +314,7 @@ Full tech stack [here](/techstack.md)
|[cffi](https://pypi.org/project/cffi)|v1.15.1|04/20/23|Martin Chapman |MIT|N/A|
|[chardet](https://pypi.org/project/chardet)|v5.1.0|04/20/23|Martin Chapman |LGPL-2.1|N/A|
|[click](https://pypi.org/project/click)|v8.1.3|04/20/23|Martin Chapman |BSD-3-Clause|N/A|
|[cryptography](https://pypi.org/project/cryptography)|v40.0.2|04/20/23|Martin Chapman |BSD-3-Clause,Apache-2.0|[CVE-2023-38325](https://github.com/advisories/GHSA-cf7p-gm2m-833m) (High)<br/>[CVE-2023-49083](https://github.com/advisories/GHSA-jfhm-5ghh-2f97) (Moderate)<br/>[CVE-2023-50782](https://github.com/advisories/GHSA-3ww4-gg4f-jr7f) (Moderate)<br/>[](https://github.com/advisories/GHSA-5cpq-8wj7-hf2v) (Low)<br/>[](https://github.com/advisories/GHSA-jm77-qphf-c4w8) (Low)<br/>[](https://github.com/advisories/GHSA-v8gr-m533-ghj9) (Low)|
|[cryptography](https://pypi.org/project/cryptography)|v40.0.2|04/20/23|Martin Chapman |BSD-3-Clause,Apache-2.0|[CVE-2024-26130](https://github.com/advisories/GHSA-6vqw-3v5j-54x4) (High)<br/>[CVE-2023-38325](https://github.com/advisories/GHSA-cf7p-gm2m-833m) (High)<br/>[CVE-2023-50782](https://github.com/advisories/GHSA-3ww4-gg4f-jr7f) (High)<br/>[CVE-2023-49083](https://github.com/advisories/GHSA-jfhm-5ghh-2f97) (Moderate)<br/>[CVE-2024-0727](https://github.com/advisories/GHSA-9v9h-cgj8-h64p) (Moderate)<br/>[](https://github.com/advisories/GHSA-v8gr-m533-ghj9) (Low)<br/>[](https://github.com/advisories/GHSA-5cpq-8wj7-hf2v) (Low)<br/>[](https://github.com/advisories/GHSA-jm77-qphf-c4w8) (Low)|
|[docutils](https://pypi.org/project/docutils)|v0.19|04/20/23|Martin Chapman |Unlicense,Python-2.0,BSD-2-Clause,CNRI-Python-GPL-Compatible|N/A|
|[gitdb](https://pypi.org/project/gitdb)|v4.0.10|04/20/23|Martin Chapman |BSD-3-Clause|N/A|
|[h11](https://pypi.org/project/h11)|v0.14.0|04/20/23|Martin Chapman |MIT|N/A|
Expand All @@ -332,7 +332,7 @@ Full tech stack [here](/techstack.md)
|[requests-toolbelt](https://pypi.org/project/requests-toolbelt)|v0.10.1|04/20/23|Martin Chapman |Apache-2.0|N/A|
|[ruamel.yaml](https://pypi.org/project/ruamel.yaml)|v0.16.5|04/20/23|Martin Chapman |MIT|N/A|
|[six](https://pypi.org/project/six)|v1.16.0|04/20/23|Martin Chapman |MIT|N/A|
|[starlette](https://pypi.org/project/starlette)|v0.26.1|04/20/23|Martin Chapman |BSD-3-Clause|[](https://github.com/advisories/GHSA-93gm-qmq6-w238) (High)<br/>[](https://github.com/advisories/GHSA-qj8w-rv5x-2v9h) (High)<br/>[CVE-2023-29159](https://github.com/advisories/GHSA-v5gw-mw7f-84px) (Low)|
|[starlette](https://pypi.org/project/starlette)|v0.26.1|04/20/23|Martin Chapman |BSD-3-Clause|[CVE-2024-24762](https://github.com/advisories/GHSA-2jv5-9r88-3w3p) (High)<br/>[](https://github.com/advisories/GHSA-93gm-qmq6-w238) (High)<br/>[](https://github.com/advisories/GHSA-qj8w-rv5x-2v9h) (High)<br/>[CVE-2023-29159](https://github.com/advisories/GHSA-v5gw-mw7f-84px) (Low)|
|[tqdm](https://pypi.org/project/tqdm)|v4.65.0|04/20/23|Martin Chapman |MPL-2.0,MIT|N/A|
|[twine](https://pypi.org/project/twine)|v4.0.2|04/20/23|Martin Chapman |Apache-2.0|N/A|
|[urllib3](https://pypi.org/project/urllib3)|v1.26.15|04/20/23|Martin Chapman |MIT|[CVE-2023-45803](https://github.com/advisories/GHSA-g4mx-q9vg-27p4) (Moderate)<br/>[CVE-2023-43804](https://github.com/advisories/GHSA-v845-jxx5-vc9f) (Moderate)|
Expand Down
46 changes: 33 additions & 13 deletions techstack.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ repo_name: kclhi/phenoflow
report_id: 647b5f87b1d7ebcdaa8ea8cadb6679b4
version: 0.1
repo_type: Public
timestamp: '2024-02-11T18:36:21+00:00'
timestamp: '2024-02-29T20:00:34+00:00'
requested_by: martinchapman
provider: github
branch: git-backend
Expand Down Expand Up @@ -462,24 +462,44 @@ tools:
last_updated_by: Martin Chapman
last_updated_on: 2023-04-20 17:33:27.000000000 Z
vulnerabilities:
- name: cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates
when called with a non-matching certificate and private key and an hmac_hash
override
cve_id: CVE-2024-26130
cve_url: https://github.com/advisories/GHSA-6vqw-3v5j-54x4
detected_date: Feb 22
severity: high
first_patched: 42.0.4
- name: cryptography mishandles SSH certificates
cve_id: CVE-2023-38325
cve_url: https://github.com/advisories/GHSA-cf7p-gm2m-833m
detected_date: Jul 15
severity: high
first_patched: 41.0.2
- name: Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
cve_id: CVE-2023-50782
cve_url: https://github.com/advisories/GHSA-3ww4-gg4f-jr7f
detected_date: Feb 6
severity: high
first_patched: 42.0.0
- name: cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
cve_id: CVE-2023-49083
cve_url: https://github.com/advisories/GHSA-jfhm-5ghh-2f97
detected_date: Nov 29
severity: moderate
first_patched: 41.0.6
- name: Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
cve_id: CVE-2023-50782
cve_url: https://github.com/advisories/GHSA-3ww4-gg4f-jr7f
detected_date: Feb 6
- name: Null pointer dereference in PKCS12 parsing
cve_id: CVE-2024-0727
cve_url: https://github.com/advisories/GHSA-9v9h-cgj8-h64p
detected_date: Feb 17
severity: moderate
first_patched: 42.0.0
first_patched: 42.0.2
- name: Vulnerable OpenSSL included in cryptography wheels
cve_id:
cve_url: https://github.com/advisories/GHSA-v8gr-m533-ghj9
detected_date: Sep 22
severity: low
first_patched: 41.0.4
- name: Vulnerable OpenSSL included in cryptography wheels
cve_id:
cve_url: https://github.com/advisories/GHSA-5cpq-8wj7-hf2v
Expand All @@ -492,12 +512,6 @@ tools:
detected_date: Aug 2
severity: low
first_patched: 41.0.3
- name: Vulnerable OpenSSL included in cryptography wheels
cve_id:
cve_url: https://github.com/advisories/GHSA-v8gr-m533-ghj9
detected_date: Sep 22
severity: low
first_patched: 41.0.4
- name: docutils
description: Docutils -- Python Documentation Utilities
package_url: https://pypi.org/project/docutils
Expand Down Expand Up @@ -760,7 +774,13 @@ tools:
last_updated_by: Martin Chapman
last_updated_on: 2023-04-20 17:33:27.000000000 Z
vulnerabilities:
- name: Starlette Content-Type Header ReDoS
- name: python-multipart vulnerable to Content-Type Header ReDoS
cve_id: CVE-2024-24762
cve_url: https://github.com/advisories/GHSA-2jv5-9r88-3w3p
detected_date: Feb 17
severity: high
first_patched: 0.36.2
- name: 'Duplicate Advisory: Starlette Content-Type Header ReDoS'
cve_id:
cve_url: https://github.com/advisories/GHSA-93gm-qmq6-w238
detected_date: Feb 6
Expand Down